description: >- black-widow è uno dei più utili, potenti e completi strumenti di penetration testing offensivo

black-widow

Strumento di penetration testing offensivo (Open Source)

black-widow fornisce modi semplici per eseguire molti tipi di raccolta informazioni e attacchi.

Completamente Open Source
Scritto in Python
Aggiornato e ampliato continuamente

Funzionalità

Installazione APT (ubutu/debian)

sudo add-apt-repository ppa:offensive-hub/black-widow
sudo apt-get update
sudo apt-get install black-widow

Installazione APT (altre distribuzioni)

Inserisci il seguente testo nel file /etc/apt/sources.list.d/black-widow.list:

deb http://ppa.launchpad.net/offensive-hub/black-widow/ubuntu focal main 
deb-src http://ppa.launchpad.net/offensive-hub/black-widow/ubuntu focal main

Esegui i seguenti comandi:

sudo sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 5D26C76613E84EA9
sudo apt-get update
sudo apt-get install black-widow

Installazione via PyPI

sudo pip3 install black-widow

Installazione Docker

Se non hai Docker, installalo

GUI: docker run -d -p 8095:80 offensive/black-widow -g
- Poi visita: http://localhost:8095
Riga di comando: docker run --rm offensive/black-widow <arguments>

Installazione manuale

sudo apt-get update && sudo apt-get install tidy clang tshark
mkdir black-widow
cd black-widow
touch black-widow.py && chmod +x black-widow.py

Copia e incolla il seguente codice nel file black-widow.py:

#!/usr/bin/env python3

from black_widow.black_widow import main

if __name__ == "__main__":
    main()

git clone [email protected]:offensive-hub/black-widow.git black_widow
sudo pip3 install -U -r black_widow/requirements.txt
./black-widow.py --django migrate black_widow
Ora puoi eseguire black-widow con: ./black-widow.py <arguments>

Esecuzione

GUI: black-widow -g
Riga di comando: black-widow <arguments>

Debug

Esegui django (esempi):
- black-widow --django runserver
- black-widow --django help
- black-widow --django "help createsuperuser"

Struttura del progetto

[root]
  |
  |-- app/              # Main application package
  |    |
  |    |-- arguments/       # User input arguments parser (100%)
  |    |
  |    |-- attack/          # Attack modality package (0%)
  |    |-- defense/         # Defense modality package (0%)
  |    |
  |    |-- gui/             # Graphical User Interface package (100%)
  |    |
  |    |-- helpers/         # Helper methods package (100%)
  |    |
  |    |-- managers/        # Managers package
  |    |    |
  |    |    |-- cluster/        # Cluster managers package (0%)
  |    |    |-- crypto/         # Encryption managers package (70%)
  |    |    |-- injection/      # Injection managers package (60%)
  |    |    |-- parser/         # Parser managers package (100%)
  |    |    |-- request/        # Request managers package (70%)
  |    |    |-- sniffer/        # Sniffer managers package (95%)
  |    |
  |    |-- services/        # Services package
  |    |    |
  |    |    |-- logger.py       # Logger service (100%)
  |    |    |-- multitask.py    # MultiTask service (100%)
  |    |    |-- serializer.py   # PickleSerializer and JsonSerializer serivces (100%)
  |    |
  |    |-- storage/         # Storage directory
  |    |
  |    |-- env.py           # Environment variables management
  |
  |-- .env              # Environment variables
  |
  |-- black-widow.py    # Main executable